A list of projects for me that would relate to my thread about embracing open-source stuff 😄

Cool. Thanks for the input!

@momurda said in Does the LDAP role require RODC?:

@Grey Also, your description sounds like youre doing some sort of SSO or interdomain trust.

Sort of. The goal is to allow a cloud service to authenticate in our domain using ldaps, and I want to limit exposure.

@JaredBusch said in Permissions between O365 systems:

@Dashrender said in Permissions between O365 systems:

I have a customer who has an O365 account. The owners of that company have created a new company, I believe it is completely separate.

Is there a way to grant R/W access to accounts created in a new O365 instance with permissions granted to the other?

If they do not want to buy a completely separate thing and manage multiple accounts, then you just add the domain to the current setup and the accounting department will have to split the billing appropriately when they do the books.

You assigned users the email addresses and accesses they need. Done.

Assuming they have two separate accounting departments, that's the challenge. They don't even know their current/future setup, at least not well enough to explain it to me.

The IP is finally holding steady! Thanks for the feedback guys!

This whole topic is now starting to sound like "A house is a house for me" lol.

Have you considered a backup ready node like StarWind does for example https://www.starwindsoftware.com/starwind-storage-appliance? They usually go preconfigured having all the required licenses including VEEAM. As far as I know, iSCSI/SMB/NFS are present and there is an option to seamlessly offload your backups to the cloud. Unfortunately, it is currently out of my budget so I am using their free product https://www.starwindsoftware.com/starwind-virtual-san-free which converts two of my older storage servers into a single mirrored backup pool. Works great so far.

Greetings folks!

Nice to see a few of you contributing to various JumpClodu threads. Let me give you a bit of background on 'why Servers' with JumpCloud...

Roll back time: It's where we began. The original instantiation of JumpCloud was to provide a central authentication and management console across Linux/Windows servers in any cloud service (e.g. AWS, Google Cloud, Rackspace, Softlayer and so on). The main thrust of what we were doing/offering (and still offer) fairly progressively, was to provide REST services to stimulate the efficiency of large-scale server infra - and mainly very ephemeral infra. The use cases varied but generally speaking, DevOps guys would bake our image into an AMI or similar image, and when they would light these up, they would perform initialization routines against the JC Directory....drop users accounts on, enable POSIX Groups, deploy sysadmins SSH keys, etc etc. It became a 'thing' and basically obviated the need for LDAP servers and wrangling with PAM. Yes, there are super elegant methods for this now....but mainly codified. e.g., Chef, Puppet, Salt, etc. These are actually used in concert with us but there is overlap.

FWIW, feel free to geek on this KB and go play with our APIs and SDKs on Github:
https://support.jumpcloud.com/customer/portal/articles/2429680

This use case is still extremely important for our customer base. We see a typical pattern of companies evaluating us, driven by DevOps where they get to get 100's or in the case of quite a few customers of our larger customers, 1-2K virtual servers. They find success and this bleeds to general IT *(e.g. those servicing rank and file employees and their personal systems, networks and apps).

So that's effectively the story, absolutely feel free to ping us to go deeper in the server management side of things!

Greg

@coliver said in Sudoers vulnerability found:

We talked about a similar issue last week. I don't think it was this exact vulnerability... Just like the previous one though this is more of the "If you configure a system incorrectly and give someone sudo access you're going to have a bad day." types of error rather then a full blown security issue.

Ah, ok. But yeah, if you give someone sudo, you are already trusting them to not fuck up your system.

I have a number of non profits on the free E1 plan. Everything is the same except the bill. 🙂

So HP shipped Enterprise HDDs instead of the desktop labeled drives they had in there from the factory. It took a few hours to mirror each drive and it was totally uneventful. - which is exactly what you're looking for in these types of things.

@Tim_G said in Erasure Coding:

I've no experience with Erasure on VMWare vSAN... but I know that it's production worthy and safe with S2D. It gives you the same resiliency but more efficient capacity. I believe it's nothing more than just an algorithm... so I can't see it being any less safe/efficient when used with a different product.

I do know that all flash = better efficiency.

It actually should do much better one. For some reason MSFT decided to cut off own balls and stop with double parity which is one linear parity sum and one global parity, while it was possible to make N => M e/c, same way as Azure and Ceph does.

As I side note, non-Microsoft RDP clients suck so far. winterminal and thinlinx both are barely usable. Have tried to Azure and Vultr as well as a remote Win10 box. Horrible.

I have a couple HP thin clients arriving tomorrow to test out.

I am also going to give Citrix a try.

If you mention it in a different context.... the bank robber was stressed and so murdered the witnesses.

That's great but "stressed" doesn't excuse the action, especially when the stress was the result of the guilty party. The CFO would not have been stressed here if someone (maybe him) had not screwed up to begin with. Just like the bank robber didn't need to rob the bank, the junior dev didn't need to be set up for failure. That the CFO or the bank robber chose to be in stressful situations and then use that as an excuse to do something far worse than the thing that caused the stress was their own choice and reverts the blame back to themselves again.

@JaredBusch said in How to Install Fedora 25 Minimal:

@black3dynamite said in How to Install Fedora 25 Minimal:

Unlike installing Linux Integration Services, Hot-Add support is not enabled by default after installing hyperv-daemons.

Create a file /etc/udev/rules.d/100-balloon.rules. You may use any other desired name for the file.

Add the following content to the file: SUBSYSTEM=="memory", ACTION=="add", ATTR{state}="online"

Reboot the system to enable Hot-Add support.

See Note 8 on Supported CentOS and Red Hat Enterprise Linux virtual machines on Hyper-V

You mean for dynamic memory to work?

Yes, dynamic memory for ballooning and hot-add.

And a Linux AD server will be something like $2.50 - $5/mo. Whereas a Windows AD server will be like $26/mo.

@bigbear said in Vultr & abusive neighbors:

I am figuring the $40 extra is worth it for consistency for an RDSH environment. On a web app or anything else that wouldn't bother me.

That's what I'm saying. Any time you are paying for "consistency" in IT, you should stop and really, really evaluate that. Consistency sounds good but is almost always a negative. It's like drifting in racing. It's not consistent, but it is how you get the best performance. Consistency is the enemy of performance.

I use pretty much all lowercase and hyphens or underscores. I'm too lazy to escape spaces and a lot of times too lazy to hold shift to get the underscore.

I have 3x office 365 accounts in there right now. All distinct logins.

Just try it guys...

Yeah, and the banners load after the page is up.